A logic error in the signature verification routine of the Stormshield Network Security platform allows an attacker to supply a dynamic data file that bypasses signature checks during the autoupdate process. The flaw permits the unauthenticated acceptance of dynamic update data, which could alter configuration or other managed settings. This vulnerability is categorized as CWE-287.

Stormshield Network Security products, specifically versions SNS 5.1.4 EA, SNS 5.0.10, and SNS 4.8.20 LTSB, are affected. The mentioned firmware updates address the flaw.

The CVSS score of 7.5 indicates high severity, while the EPSS score of less than 1% suggests a low current exploitation likelihood. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require an attacker to host or modify an update file on a custom or compromised update server and host it over HTTPS. Since the signature check can be bypassed, no elevated privileges are necessary on the target, making the attack path straightforward once a reachable update server is compromised.